Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5729A25463AF11ECB9234EC65A40D577.roa
File: 5729A25463AF11ECB9234EC65A40D577.roa (raw, json)
Hash identifier: ceP8d7UOpCnvwUmgXELGZyVI3TvcpWceBQlC+mjI/88=
Subject key identifier: 42:74:F9:AF:0B:27:48:F3:AD:B3:D5:FC:E9:44:E2:B3:D8:DF:AE:E8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 03F5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5729A25463AF11ECB9234EC65A40D577.roa
Signing time: Thu 23 Dec 2021 05:15:27 +0000
ROA not before: Thu 23 Dec 2021 05:15:22 +0000
ROA not after: Wed 17 Dec 2025 05:15:22 +0000
asID: 43233
IP address blocks: 192.142.0.0/19 maxlen: 24
192.142.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Feb 2022 06:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 23 05:15:22 2021 GMT
Not After : Dec 17 05:15:22 2025 GMT
Subject: CN=61c405ef-f279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:a0:dc:3a:aa:4d:bb:4e:d9:9c:7b:ec:35:
2d:cc:8e:8c:cc:1f:1a:2b:90:be:92:72:e7:ba:b3:
7a:8e:45:cd:05:da:55:cd:f3:26:80:38:df:33:22:
97:17:3c:c3:5f:a8:da:5f:a7:1a:6e:0f:08:03:19:
0d:f8:cf:be:eb:92:9d:95:a6:f8:76:fe:7d:99:96:
eb:fc:0e:4a:18:79:91:57:ab:9f:59:0f:cf:34:ef:
87:37:ef:ab:e1:00:a0:b1:e7:cc:84:5e:16:db:c0:
85:3a:ac:2e:7c:0b:c6:50:8a:84:0a:27:ec:56:d1:
4a:08:95:02:02:42:c4:a0:4a:2c:92:33:dd:c2:a4:
c4:8d:16:a6:9d:b2:0a:3e:2b:42:86:c3:45:6c:80:
ba:c0:c0:b0:4f:b5:26:b7:c8:f9:9b:b7:4d:82:c8:
15:53:3f:92:38:57:c2:57:03:fe:00:39:3e:61:57:
71:d2:ad:17:a3:b2:df:b9:8c:fa:6a:4e:6f:b3:d4:
d3:4f:48:ff:4d:3e:df:99:00:01:49:86:d6:73:f4:
a4:3f:aa:ce:95:8a:e7:84:d0:67:6f:55:a0:26:c2:
01:00:d8:b7:c4:2b:58:d0:68:39:da:42:97:b7:6a:
92:e8:b9:e5:45:de:23:94:e5:b8:78:be:cb:15:a2:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:F9:AF:0B:27:48:F3:AD:B3:D5:FC:E9:44:E2:B3:D8:DF:AE:E8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5729A25463AF11ECB9234EC65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.0.0/19
192.142.64.0/19
Signature Algorithm: sha256WithRSAEncryption
31:af:be:87:5d:ce:b1:b9:bf:03:a0:1b:aa:c9:dd:3c:3c:62:
f6:a8:6f:58:ab:a6:bd:82:58:21:03:06:fc:53:8d:fe:e2:f6:
e3:30:69:c0:ab:dd:ad:3b:b3:99:c3:6c:6f:1d:3d:65:1f:63:
c5:8b:fe:4e:7f:89:b2:f6:f4:8f:58:ba:a2:6c:b2:6b:90:42:
e3:39:5d:fe:e4:0c:e2:37:10:dc:99:3b:cf:84:f9:26:27:14:
fa:74:ac:0d:72:b1:dd:7f:c9:41:06:4f:ad:84:85:da:d5:55:
16:5c:10:20:b1:56:1b:28:e1:44:a0:e1:46:ba:1c:61:39:0d:
81:bf:f9:26:97:6c:f0:92:93:e2:2e:2c:83:18:66:c6:01:87:
68:b8:68:7d:0e:9f:ac:6b:c1:fd:13:2d:b9:05:05:19:b7:9f:
0f:bf:be:44:8f:89:1a:d6:1f:a6:b2:e8:3f:0f:b3:3b:72:b7:
90:56:13:41:a2:8a:04:fd:29:fa:cc:ed:99:af:2b:f2:2f:ea:
8a:85:d5:2c:49:cd:4a:a9:43:ca:3e:0e:61:bf:70:cf:f2:26:
40:6b:c1:bb:98:be:20:7a:4f:d1:c0:d5:c3:26:a6:76:1a:0b:
12:c0:00:44:69:d0:57:c9:b7:d6:48:e4:73:70:a4:98:f6:e7:
7c:8a:1c:8c
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMTEyMjMwNTE1MjJaFw0yNTEyMTcwNTE1MjJaMBgxFjAU
BgNVBAMMDTYxYzQwNWVmLWYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCU26DcOqpNu07ZnHvsNS3MjozMHxorkL6Scue6s3qORc0F2lXN8yaAON8z
IpcXPMNfqNpfpxpuDwgDGQ34z77rkp2Vpvh2/n2Zluv8DkoYeZFXq59ZD88074c3
76vhAKCx58yEXhbbwIU6rC58C8ZQioQKJ+xW0UoIlQICQsSgSiySM93CpMSNFqad
sgo+K0KGw0VsgLrAwLBPtSa3yPmbt02CyBVTP5I4V8JXA/4AOT5hV3HSrRejst+5
jPpqTm+z1NNPSP9NPt+ZAAFJhtZz9KQ/qs6ViueE0GdvVaAmwgEA2LfEK1jQaDna
Qpe3apLoueVF3iOU5bh4vssVohflAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQnT5
rwsnSPOts9X86UTis9jfrugwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzU3MjlBMjU0NjNBRjExRUNCOTIzNEVDNjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAXAjgADBAXAjkAwDQYJKoZIhvcN
AQELBQADggEBADGvvoddzrG5vwOgG6rJ3Tw8Yvaob1irpr2CWCEDBvxTjf7i9uMw
acCr3a07s5nDbG8dPWUfY8WL/k5/ibL29I9YuqJssmuQQuM5Xf7kDOI3ENyZO8+E
+SYnFPp0rA1ysd1/yUEGT62EhdrVVRZcECCxVhso4USg4Ua6HGE5DYG/+SaXbPCS
k+IuLIMYZsYBh2i4aH0On6xrwf0TLbkFBRm3nw+/vkSPiRrWH6ay6D8Psztyt5BW
E0GiigT9KfrM7ZmvK/Iv6oqF1SxJzUqpQ8o+DmG/cM/yJkBrwbuYviB6T9HA1cMm
pnYaCxLAAERp0FfJt9ZI5HNwpJj253yKHIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org